The Payment Problem I Still Can't Explain

I'm a legal-age customer buying a legal product at a licensed store, paying more tax than I'd pay on almost anything else. Let me tap my credit card and walk out like I do everywhere else. But I can't.

My state legalized it. My state is taxing me for it. When I buy cannabis, can I use my credit card? Maybe.

Will my Amex work? No.

Do I have to pay cash?

Sometimes. Sometimes I don't. Sometimes I get money back from a transaction that wasn't technically a purchase.

Sometimes the terminal works one week and doesn't the next.

Nobody behind the counter wants to explain why. Nobody behind the processor can guarantee it stays on.

And the reason why has nothing to do with the dispensary, the processor, or the product. Cannabis is federally illegal. That's it. That's the entire problem.

Here is what I know about payments in cannabis. It's a mess. And not the kind of mess that gets cleaned up with better technology or a sharper compliance strategy. It's structural.

That means even though Chase processes cannabis payments in Canada, here in the U.S. the same product is not allowed. Do the big guys actually care? I'd wager no. But today, every solution you've seen at a dispensary is a workaround. Some are compliant workarounds. Some are kind of not.

Visa and Mastercard can shut any of them down at any time. Not because the processor broke a rule. Because the card brands do not formally recognize cannabis commerce on their rails, regardless of how you structure the transaction.

When they shut it down, it is not a warning. It is not a conversation. Mastercard calls the bank. The bank kills the merchant account. Every dollar in flight freezes for 180 days. No appeal. No negotiation. The dispensary does not get paid. The processor cannot do anything about it. One hundred eighty days is six months of cash flow gone for an operator already running tight margins.

Aubrey Amatelli lived this. She spent over a decade at JP Morgan, the largest payment processor in the world. She built PayRio with the belief that if you followed every rule, structured the funds flow correctly, and used the right MCC codes, you were protected. Mastercard shut her down after a year and a half. Everything she thought was bulletproof wasn't. Not because she was wrong about compliance. Because compliance does not equal permission.

So what changes this? Not rescheduling. Amatelli chairs the NCIA's Banking and Financial Services Committee. Her position is clear. Rescheduling helps operators on 280E, helps with banking access, helps with cost of doing business. But Visa and Mastercard are not waiting for rescheduling. They are waiting for federal legalization. Until that happens, every payment solution in cannabis is temporary infrastructure running on someone else's tolerance.

PayRio now runs multiple processors through multiple bank sponsors on different rails inside one terminal. If Mastercard kills one rail, the terminal switches to another automatically. The dispensary never goes dark. That was not the original business plan. It was built after the original plan got killed.

The question is not whether your systems are compliant. It is whether your business still runs the morning compliance wasn't enough.